608775 - Show self-signed SSL websites as normal websites

Status: RESOLVED DUPLICATE of bug 471657

(Firefox :: Security, enhancement)

Description

[Martin]

User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.2.11) Gecko/20101013 Ubuntu/10.04 (lucid) Firefox/3.6.11 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.2.11) Gecko/20101013 Ubuntu/10.04 (lucid) Firefox/3.6.11 (.NET CLR 3.5.30729)

I think this must be somewhere, but if it is, I can't find the right keywords.


I propose that Firefox should treat HTTPS websites with self-signed certificates as if they were normal websites i.e. no pretty icons/colours to reassure the user of security, but no "DANGER! DANGER!" warnings either. This would allow websites to at least use the encryption element even if the identity of the server is not verified.

Alternatively, maybe a red padlock, or some other warning that doesn't require several clicks and a lot of confidence to get through.

Reproducible: Always

Comment 1

[Benjamin Smedberg]

I'm sure this is a dup of a WONTFIX, but I can't find it.

Comment 2

[Martin]

Ah, I didn't think to filter by WONTFIX... This one?

https://bugzilla.mozilla.org/show_bug.cgi?id=471657

Comment 3

[Johnathan Nightingale [:johnath]]

(In reply to comment #2)
> Ah, I didn't think to filter by WONTFIX... This one?
> 
> https://bugzilla.mozilla.org/show_bug.cgi?id=471657

Yep, that'll do.